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Field of the Invention 

The present invention relates generally to an apparatus and a method for 
providing failover operation of a communication link in a data communications 
network. 

Background 

The telecommunications mdustry has developed systems for transmission and 
reception of digital data signals organized in a plurality of temporal frames, such as 
Synchronous Optical Network (SONET) frames. The SONET is an industry-standard 
optical network that is used for the transmission of various types of communication 
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signals, such as telephony and video signals. The SONET frames are organized in a 
plurality of superframes, each superframe having a duration of 1 ms and consists of 8 
frames each having a duration of 125 [is. Digital data originating from a plurality of 
channels may be multiplexed by using the technique of time division multiplexing 
5 (TDM) and formatted into a plurality of asynchronous transfer mode (ATM) cells for 
transmission over a SONET physical layer interface. A SONET frame may consist of 
a plurality of ATM cells. SONET is described in Telecordia SONET Specification 
Generic Requirements document GR-253; December 1995, REVOl - Dec 1997, REV02 
- Jan 1999; Telecordia Technologies, Inc., Morristown, NJ 07960, USA, incorporated 

10 by reference herein. 

Commonly, the ATM cells are transmitted over a SONET link, via optical 
fibre, between two matched physical devices. As used herein, the optical fiber is 
considered a transmission medium , i.e. a physical conduit for the transmission of data. 
The terms communication link and link are used to describe a higher level concept, 

1 5 and do not require any one type of transmission medium. A single link may comprise 
many different types of transmission medium, and may include several steps, pathways, 
or intermediate components. ATM cells are transmitted over a SONET link in a number 
of different types of systems, one example of which is a Litespan system , made by 
Alcatel USA, Piano, TX. A Litespan system may include a Broadband Fiber Bank 

20 (BFB) and a Broadband Remote Transceiver (BRX), which in turn includes a number 
of Broadband Multiplex Units (BMU). Failure of the optical fiber will cause a break 
in communications between the BFB and the BMU (hence the BRX). Such breaks may 
result in substantial downtime and can be very costly to the owner. Therefore, 
redundant devices, and redundant optical fibers, are often used to negate the problems 

25 associated with a single optical fiber failure. 
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The process of detecting a failure in the active communication medium, and 
switching over to a redundant medium is called failover or protection sw^itching . 

Failover is possible only if there is redundancy - Le., extra fibers and extra 
devices. Traditionally, this means each link uses four fibers, two for each direction of 
5 traffic. Providing this extra, redundant, fiber greatly increases the cost of installing and 
maintaining the link. One method typically employed to reduce the cost of providing 
the link (or to increase the bandv^dth of the link, which indirectly reduces the cost) is 
to use the fiber bidirectionally , so only two fibers are required for each link. A problem 
v^th this method is that there is no defined way for the device at one end of a 

1 0 bidirectional link to know when the fiber fails, and when to switch over to a redundant 
fiber/device in a coordinated fashion. Specifically, a transmitting device will not 
necessarily know about a break in the fiber unless it fails to receive an expected 
response with some predetermined time period, and even then it may re-try the 
transmission one or more tunes before concluding that the link has failed. This process 

1 5 can take a relatively long time, during which considerable amounts of data can be lost, 
and in the end still does not prove conclusively that the failure was due to a break in the 
fiber, and not to some other device failure. 

The traditional method (as detailed in SONET specification Telecordia GR- 
253) used to support failover is to use two separate optical fibers for each link, one for 

20 each direction of data travel (or fovir optical fibers, with two for each direction if 
redundancy is desired). When a line break is detected by a receiving device, through 
loss of signal, that device notifies the sending device via the fiber running in the 
opposite direction. However, this system costs substantially more to install than a 
simple non-failover system, and since it requires two optical fiber cables for each pair 

25 of devices, reduces the overall capacity of the fiber network. Therefore, there is a need 
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to provide a failover system and method for use with an asynchronous data network, 
which eliminates the risk of network downtime due to single line failure and 
simultaneously makes optimum use of the existing fiber network. 

Summary of the Invention 

5 The invention addresses these needs. The present invention relates to an 

apparatus and a method for providing failover operation of a communication link in a 
bidirectional data communications network. 

In one embodiment the invention comprises an apparatus for providing failover 
protection in a bidirectional data communication network, comprising: a first 

10 communications device, for receiving data and transmitting data with an identifying 
signature; a second communications device for receiving data and transmitting data 
with an identifying signature; a first communications interface for the relay of 
bidirectional data communication, which is by default active; a second communications 
interface for the relay of bidirectional data communication, which is by default inactive; 

15 logic means within the first communications device for determining the signature of 
incoming data, thus determining the source of the data, and thus determining that the 
first communications interface is broken; logic means within the first communications 
device for setting the first communications interface as inactive and the second 
communications interface as active, in response to the system determining that the 

20 communications link is broken. 

In another embodiment the invention comprises a method for providing 
failover protection in a bidirectional data commxmication network, comprising: 
activating a fixst communications link for transfer of data from a first device to a second 
device; sending data fi"om the first device to the second device, together with a first 
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source identifier; detecting the source identifier of all data received by the first device; 
and, determining when the source identifier of data received by the first device equals 
the source identifier of data sent by the first device, that a failure has occurred in the 
first communications link and deactivating the first communications link, and 
5 activating a second communications link. 

In yet another embodiment the invention comprises a method for providing 
failover protection in a bidirectional data communication network, comprising: 
activating a fiirst commimications link for transfer of data firom a first device to a second 
device; sending data fi-om the first device to the second device, together with a first 
1 0 source identifier; sending data fi-om the second device to the first device, together with 
a second source identifier; detecting at the first device the source identifier of all data 
received by the first 

device; detecting at the second device the source identifier of all data received by the 
second device; and, determining, either when the source identifier of data received by 
1 5 the first device equals the source identifier of data sent by the first device, or when the 
source identifier of data received by the second device equals the source identifier of 
data sent by the second device, that a failure has occurred in the first communications 
link, and deactivating the first communications link, activating a second 
communications hnk. 

20 Brief Description of the Drawings 

Figure 1 is a block diagram of a SONET ring; 

Figure 2 is a schematic showing the format of a typical SONET fi-ame; 
Figure 3 shows an abstraction layer node for use with the invention; 
Figure 4 shows another abstraction layer node for use with the invention; 
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Figure 5 shows the payload envelope of an ATM transmission; 
Figure 6 is a schematic of one embodiment of the invention; 
Figure 7 is an illustration showing the timing of the failover protection system; 
Figure 8 illustrates the layout of the Kl and K2 bytes and their usage; 
5 Figure 9 illustrates which portions of the Kl and K2 bytes are used by the 

BMUs; 

Figure 10 is a flowchart illustrating the steps accomplished by the protection 
switching application; 

Figure 11 is a block diagram showing a typical Litespan / BRX system which 
1 0 incorporates the invention; 

Figure 12 is a flowchart illustrating the steps involved in sending ATM data 
from the BRX toaBFB; 

Figure 13 is a block diagram showing the BRX hardware architecture; 
Figure 14 is a block diagram showing an embodiment of a SONET 
15 commxmication system in which the failover apparatus according to the present 
invention may be implemented; 

Figure 15 is a flowchart illustrating an example of a failover method which can 
be performed by the apparatus according to the present invention; and 

Figure 16 is a flowchart illustrating another example of a failover method 
20 which can be performed by the apparatus according to the present invention. 
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Detailed Description 

The present invention provides a system and a method of allow^ing failover 
operation of a communication link between two devices in a data communications 
network. 
5 Digital Access Systems 

One embodiment of the invention may be used in a Digital Access System. As 
used herein a Digital Access System is a telecommunication system that carries and/or 
converts signals between a backbone switching network (for example a digital switch) 
and a series of individual subscriber locations. Such access systems include the 

1 0 Litespan Access System produced by Alcatel Systems, Inc. A Litespan Access System 
or simply Litespan System comprises a group ofLitespan terminal units connected 
together. The physical connector may be of various media types but is typically a 
fiberoptic cable. The logical connection may similarly be of various types. Alcatel 
typically uses a SONET or SONET-like connection to provide the coimection between 

15 the Litespan terminal imits. As used herein SONET-like defines a protocol which 
operates substantially similar to SONET, but may depart from the SONET specification 
in the use of one or more of the cells. In a typical scenario, one Litespan terminal unit 
is located at a central office (a central office terminal or COT) and communicates 
directly with the ATM cloud and/or a local digital switch. The COT then 

20 communicates via the fiber/SONET link with the remote terminal units (remote 
terminals or RTs). 

Line cards may be installed within the terminals (both the COT and the RT) to 
increase their functionality. In one embodiment, a Broadband Fiber Bank (BFB) is 
installed in the COT and coimected on the switch side by fiber to the ATM cloud. The 
25 BFB produces a plurality of distribution fibers. A Broadband optical network unit 
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(ONU) such as a Broadband Remote Transceiver (BRX) is installed in the RT. The 
distribution fibers from the BFB connect to the multiplexer side of the BRX using 
ATM. The distribution side of the BRX then provides narrowband and broadband 
services over copper to individual subscribers. 
5 In accordance with the present invention, a system and a method is disclosed 

which provides for failover protection should the communications link between two 
devices in a data commxmications network fail. The invention may be used in the 
specific embodiments described above to provide for failover operation of the link 
between the central office terminal (COT) and the remote terminal (RT). If the active 

10 fiber linking the COT and the RT (or equivalently the BFB and the BRX) is cut or 
damaged, it acts as a mirror, reflecting upstream traffic back to the BRX, or 
downstream traffic back to the BFB. This reflected traffic is detected, and appropriate 
failover measures are undertaken. 

The present invention provides an apparatus and a method of providing facility 

15 failover protection in any system which uses time multiplexed cells, such as time 
division multiplexed (TDM) cells in temporal frames such as synchronous optical 
network (SONET) frames, by assigning one of the time multiplexed cells in the marker 
frame as a marker cell which includes a plurality of header bytes and payload bytes, and 
coding the header bytes with header data. The header contains information specific to 

20 the device sending the particular frame. The method according to the present invention 
fixrther allows a receive interface, such as a Quad Optical Line Unit (QOLU) or 
SONET octal bus in a SONET communication system, to detect the marker cell in each 
marker frame and extract the identifying information to determine the origin of the 
incoming cell. 
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SONET and ATM 

SONET is a standardized physical layer technology used in the 
telecommunications industry for the transmission of various types of communication 
signals such as telephone and voice which offers transmission rates in the gigabit per 
5 second range, and includes a sophisticated management system. SONET is typically 
deployed over optical fiber in a dual-ring fashion, as shown in Figure 1. 

As shown in Figure 1, a series of Add/Drop Multiplexers (ADM) 1 1 6 allow the 
insertion of user payload originating from information sources 118, such as an ATM 
switch 120, into the SONET frames circulating in the ring 112, 1 14. The dual ring 

1 0 layout provides fault tolerance by switching from the working ring 1 1 2 to the alternate 
ring 114 when a failure occurs. 

SONET uses a synchronous transmission scheme, with a standard SONET 
frame transmitted every 125 |is. Each frame is logically organized as a two 
dimensional array of bytes. The size of the frame depends on the channel rate. The 

1 5 basic SONET channel is a Synchronous Transport Signal- 1 (STS- 1 ) which consists of 
frames that have 810 bytes organized in 9 rows by 90 columns. At 8,000 frames per 
second, this gives a channel rate of 51.840 Mbps. A standard STS-1 frame 140, an 
example of which is shown in Figure 2, includes a payload 142, a path overhead 144, 
a section overhead 146, and a line overhead 148. In order to manage the operation of 

20 the channel, additional data must be transferred over the SONET link. This data is 
transferred in the SONET overhead. The overhead for managing a SONET STS-1 
channel and accompanying section equipment consumes 3 of these 90 columns, leaving 
87columns for the payload. The payload, otherwise termed the Synchronous Payload 
Envelope (SPE), includes the path overhead of 1 column. This leaves 86 columns for 

25 the user payload, which provides a user data rate of 49.536 Mbps. 



Page 9 of 57 



PATENT APPLICATION 
DOCKET NO. 1285-0060US 
ALC-135717 

Data rates higher than STS-1 are obtained by multiplexing multiple STS-1 
signals. For example, three STS-1 signals can be byte-interleaved to form an STS-3 
signal that operates at 1 55.52 Mbps. Another form of multiplexing is to concatenate the 
overhead and payload bytes of multiple STS-1 signals. For example, an STS-3c frame 
5 contains 9 overhead colxmms (for section and path overhead) and 26 1 columns for the 
SPE. The operating rate is the same at 155.52 Mbps. STS-n is an electrical signal 
which, when modulated over an optical carrier, is referred to as an OC-n optical signal. 

Although SONET provides a synchronous frame structure, it does not constrain 
the user payload to be carried at a specific position within the SONET frame. Instead, 
10 it allows the user payload to float within and across SONET frame boundaries, by using 
special fields in the overhead bytes of the SONET frame to point to the beginning of 
the user payload. 

Asynchronous Transfer Mode (ATM) is a cell-based switching and multiplexing 
technology designed as a general-purpose, connection-oriented transport mechanism 

15 for a wide range of services. Fixed length ATM cells enable extremely fast hardware- 
based switching. They also provide a fine-grain unit for multiplexing multiple data 
streams on to a single link. Each stream is called a Virtual Channel Connection (VCC) 
and is identified by an identifier carried in the header of each cell in the stream. ATM 
is much more than a link layer technology. It provides a fiUl complement of features 

20 associated with network and transport layers such as network-based addressing, routing 
and flow control. ATM allows multiple data streams to flexibly share the available link 
bandwidth while providing a pre-determined quality of service to each connection. 
Different ATM Adaptation Layers (AAL) may be defined to map the ixser data into 
ATM cells, to suit particular environments. 

25 ATM can operate over various physical media. The ATM layer generates ATM 
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cells and hands them to the physical (PHY) layer which handles the actual transmission 
and reception of cells from the physical medium. SONET is just one of the many 
physical layers defined for ATM. ATM cells are directly and continuously mapped into 
the SONET payload because an integral number of its 53-byte cells will not fit into a 
5 single fi-ame. On reception, the Header Error Check (HEC) field of the ATM cell 
headers is used to delineate the cells firom the SONET payload. 

The SONET Overhead 

As described above, the basic element of the SONET standard is the 
synchronous transport signal level 1 (STS-1), which provides the fi-aming for 
1 0 transmission of control information along v^th the customer traffic. The STS-1 firame 
consists of: 

The transport overhead, which carries section and line overhead control 
information, including parity, trace, alarm signals, orderwire, and data 
communication channels; and, 

1 5 The synchronous payload envelope (SPE), which carries information between 

the terminals and the SONET network. This information includes both the 
payload traffic and the path overhead. The path overhead coordinates the 
activities between the SONET terminals. 

These two basic information groups provide the facilities to transport data over 
20 the network, and to support operations and management of the SONET network. 

When actually transmitted over the fiber, information is presented on a row by 
row basis, starting at column one of each row and continuing on through the remaining 
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columns until all information has been transmitted. At higher rates of transmission, the 
number of STS- 1 frames transmitted increase. For example^ at OC-3 rates, three STS- 1 
frames (Le,, single STS-3 frame) are transmitted for each 125 ms time period. As the 
rates increase, so do the number of frames transmitted. 
5 The transport overhead, an example of which is shown in Table 1 , and described 

in detail in Communication Systems Design Magazine, CMP Publications, March 1 999 
Issue, provides mechanisms to control the section and line interactions over the SONET 
network. The section interactions provide for the physical link between adjacent peer 
equipment, such as the transfer of information between a SONET terminal and a 

10 regenerator. 

Each of the entries shown in Table 1 represents a physical byte (8 bits) of 
information. In some cases, a field can be used for two different purposes. For example, 
a first case that applies to a single STS-1 fr^e in the STS-N transport, and a second 
case that is applied to all other STS-1 frames in the STS-N transmission. In these cases, 

1 5 the field is represented as X/Y , with X representing the first case, and Y referring to 
the second case. 

The section overhead information manages the transport of the optical channel 
information, and provides the information needed to support the interaction between 
SONET line termination equipment (LTE s) over that optical channel. The section 
20 overhead fields are used as follows: 
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TRAMl SPORT OVERHEAD 

Section Overhead 

Al 

Framing 
A2 

Framing 

JO/ZO Trace/growth 



Bl/imdefined 

El 

Orderwire 
Fl 

User 



Dl 

Data comm 

D2 

Data comm 
D3 

Data comm 

Line Overhead 
Hi 

Pointer 
H2 

Pointer 

H3 

Pointer action 



B2 

Kl 
APS 

K2 
APS 
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D4 

Data comm 
D5 

Data comm 
D6 

Data comm 



D7 

Data comm 
D8 

Data comm 
D9 

Data comm 



DIO 

Data comm 
Dll 

Data comm 
D12 

Data comm 



Sl/Zl 

Sync status/growth 
MO, M1/Z2 
REI-L/growth 

E2 

Orderwire 



Table 1: STS-1 transport overhead. 



30 Al and A2 delineate the STS-1 frames. For all frames, these fields are 

represented as having fixed values of A 1 at 0xF6 and A2 at 0x28. 

JO/ZO is also referred to as the trace/growth field. This field identifies the 
specific section being carried over the attached fiber, and may be used as a mechanism 
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to positively identify the connection between two adjacent pieces of SONET 
equipment. The ZO bytes are reserved to support future growth. 

Bl contains parity information used to detect transmission errors. This field is 
used to monitor the behavior and reliabiUty of the physical channel. 
5 El carries local voice orderwire between various section-terminating 

equipment, and provides a set of services that operators and technicians can coordinate 
in maintenance activities. 

Fl , the section user channel, terminates at all section equipment, and can be 
applied to special applications. 
10 D 1 , D2 and D3 data communication channel, when combined, provide a single 

192-kbps channel to support the overlay commimications network operations 
administration, maintenance, and provisioning traffic. 

While the section overhead provides a set of mechanisms to coordinate the 
point-to-point transmission of information, the line overhead 
1 5 services concentrate on the alignment and delivery of information between terminals. 
The fields included in the line overhead include: 

HI and H2 STS payload pointer bytes are used to indicate the offset into the 
STS frame at which the SPE begins. They account for possible differences in the timing 
of the various interfaces on the network. 
20 H3 pointer action bytes can be used to carry an extra SPE byte, if 

there is a negative pointer action. 

B2 is used for line-error monitoring. 

Kl and K2 are automatic protection switch (APS) channels used for 
applications where line level protection switching is employed. These fields control 
25 automatic failover algorithms. There are two general forms of protection switching 
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supported by these fields: linear, in which one line protects one or more working lines, 
and bidirectional switched rings, in which alternate routes are managed through the ring 
when a faxilt occurs. A second important feature provided by the Kl and K2 fields is 
that of alarm state signaling. These signals can signal that a line defect of some sort has 
5 been detected, allowing downstream equipment to suppress alarm reports and aid in 
alarm correlation and fault isolation. 

D4 through D12 line DCC fields support the transmission of OAM&P traffic 
at an aggregate data rate of 576 kbps, as in the case of the section DCC. 

SI is for synchronization status, contained in the first STS-1 of an STS-N. 
10 Zl represents growth and is reserved for future use. 

MO STS-1 line remote error indication is intended for only OC-1 rates. This 
field contains the error count detected by the transmitting line termination equipment 
(LTE). 

Ml , STS-N, is for higher rate signals (OC-3). The Ml field, in the third STS-1, 
15 in the STS-N, is used to support the Remote Error Indication function. 
Z2 is for growth and is reserved. 

E2 is for orderwire, and it supports an express voice orderwire 
between Line Terminal Equipment (LTE). 

The SPE contains a combination of path overhead and payload traffic. The first 
20 colimm or path overhead of each SPE is shown in Table 2. The path overhead fields 
are used as follows: 

J 1 , or path trace, contains a repeating 64-byte message used to verify the distant 
end of a connection. 
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B3 contains a parity calculation of the contents of the SPE, regardless of pointer 
adjustments. This is used to determine if any transmission errors have occurred over the 
path in question. 

C2 path signal label indicates the actual content held within the SPE, including 
5 the payload status. 

Gl , path status, provides an end-to-end monitoring service that can include an 
accumulated count of the number of detected errors. 

F2 , path user channel, is used for user applications between path end-points. 
H4, virtual tributary multiframe indicator, provides control information to 
1 0 describe the structure of the payload traffic. 
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rr\ LrL Kjy CitsJtlJuAlJ 


1 


Trace 




Jl 


2 


BIP-8 




B3 


3 


Signal label 




C2 


4 


Path status 




Gl 


5 


User channel 




F2 


6 


Indicator 




H4 


7 


Growth 




Z3 


8 


Growth 




Z4 


9 


Tandem connection 




Z5 



10 Table 2: SPE path overhead column format 

ATM/TDM Cell Packing 

In one embodiment of the invention, an optical OC-3 interface is used to 
connect the BRX to a Litespan BFB. A standard STS-3c Synchronous Payload 
Envelope (SPE) of 270 columns and 9 rows is used. Since the STS-3c SPE is allowed 
15 to float in the STS frame, the H 1 field (in the Line Overhead region) provides a pointer 
to the first byte (field Jl in the Path Overhead region) of the STS-3c SPE as illustrated 
in Figure 3. ATM cells can start anywhere in the STS-3c SPE 162 and up to 44 full 
ATM cells 1 64 can fit in the SPE. The Header Error Check (HEC) field method is used 
by the receiver for cell delineation. The STS-3c SPE is packed with two types of cells: 
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Regular ATM cells 166 carrying data traffic, simply referred to as ATM cells; 
and, 

C ATM cells carrying TDM SBI data, referred to as TDM cells 168. 

When an SBI frame content is packed into an ATM cell, eight TDM cells are 
5 interleaved with ATM at the rate of 1 :4, starting from the beginning of the STS-3c SPE 
frame. In this packing scheme the TDM traffic represents about 20% taxing over the 
entire STS-3c SPE pay load bandwidth. The SBI frame of 32 timeslots is in turn 
mapped into ATM cells using a proprietary adaptation layer scheme. Two adaptation 
modes may be used: 

10 1 . Unpacked AAL-D Mode. The unpacked AAL-D mode is illustrated in Figure 
4. In this mode each SBI frame of 32 slots 182 is mapped into an ATM cell 
184, thus leaving 16 unused bytes in the TDM cells 186. 
2. Packed AAL-D Mode. The packed AAL-D mode is illustrated in Figure 5, In 
this mode three SBI frames 202, 204, 206, a total of 32X3=96 bytes, are 
1 5 mapped into two consecutive TDM cells 208, 210, 

When the TDM traffic is converted in ATM cells using the packed or unpacked 
AAL-D, the bit rate of octalbus traffic inflates in the OC-3/3 link due to the ATM 
overhead and the unused bytes in unpacked case. 
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Teraiinal Architecture 

In accordance with the invention, a form of SONET protection switching 
assures optical line integrity between the BRX and Litespan terminal systems through 
the use of protection equipment. The BRX architecture employs a design in which the 
5 optical carrier and common control functionality are housed on the same physical card, 
the BMU. To provide protection switching, both a primary BMU and a protection 
BMU are used. Figure 6 illustrates one embodiment of the invention in which two 
BMUs are connected to a BFB via independent fibers 232, 234. A first BMU 222 
(BMU-A) acts as a primary BMU, while a second BMU 224(BMU-B) acts as a 

10 protection BMU. The BFB 226 first attempts to establish communications with the 
primary BMU upon system startup. In normal operation, neither BMU has protection 
precedence. In the typical Litespan setup shown in Figure 6, the BRX terminates an 
optical line. No SONET rings are present, and therefore protection switching can only 
be linear (e.g., point-to-point). 

1 5 Automatic Protection Switching (APS) increases system integrity and reduces 

downtime by automatically substituting a protection line for a failed line in a 
sufficiently short period of time. A failed line is determined based on detecting a set 
of predetermined failure conditions including, for example. Loss of Signal (LOS), Loss 
of Frame (LOF), Alarm Indication Signal (AIS), Bit Error Rate (BER), and timing 

20 block failure. In one embodiment, the protection BMU is set as the master for 
protection switching, and determines the switching priority level based on the received 
APS data from the far-end (FE), local signaling conditions and local equipment status. 
The APS data itself is carried in the Kl and K2 bytes of the signal overhead. The 
protection BMU also uses the APS data to inform its protection priority level to the FE. 
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To increase Synchronous Transport Signal (STS) payload continuity, the BRX 
can implement a 1+1 architecture. This architecture has the protection optics carrying 
the same payloads to the FE as the primary optics. At the receiving end, the primary 
and protection OC-3 signals are monitored independently for failures. The receiving 
5 equipment then chooses either the primary or the protection optics as the one from 
which to select the traffic. An altemative is a 1 :1 architecture in which each optical 
connection may carry different payloads. Usually a 1:1 architecture will use one 
standby device for each active device. 

Bi-directional switching mode is used to simultaneously switch the optical path 

10 on both ends (i.e., the BRX and BFB). Switching of only one end is not allowed. 
Near-end (NE) and FE coordination is accomplished using APS data communications. 
The BRX can be provisioned in either revertive or non-re vertive mode for SONET 
protection switching. When positioned in revertive mode, the system reverts back to 
using the primary BMU when the primary BMU detects failure conditions no longer 

15 exist. During a line-level protection switch, all STS payload envelopes carried in an 
OC-3 signal are switched simultaneously. A protection switching software application 
(PS W) handles this switching to minimize loss of data during the switchover. 

Optical Interface and the APS 

The SONET optical interface is the medium for all commujiications in and out 
20 of the BRX system. Such communications includes voice, data, and signaling traffic, 
along with terminal datalink and SONET overhead data. The datalink data signals the 
protection switching alarms and provisioning-related messages which define how the 
BRX should protect the optics. The SONET overhead includes the APS data to 
communicate with the FE protection switching. PS W-related alarms will be reported 
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and cleared by the BRX. In a specific embodiment, the PSW application reads from 
and writes to hardware registers of a SONET/ATM Physical Layer Device, which 
terminates the SONET signal and removes/inserts ATM cells. One example of a 
register data structure pPm5348Protl is defined in Listing 1. 



typedef struct tPm5348Regs 

{ 

union 

{ 

tPortl Portl; /* Portl - OxO-OxOD registers */ 

tPortl Port2; /* Port2 - 0x80-0x8D registers */ 

} CtrlRegs; 

byte rTxSyncStatus; /* 0x00E/0x08E - Transmit Synchronization status */ 

byte Rsvdl; /* 0x00F/0x08F - Reserved */ 

byte rRsopCtrnntEnbI;/*0x010/0x090 - RSOP control/interrupt enable */ 

byte rRsopIntStatus; /* 0x01 1/0x091 - RSOP status & int status */ 

byte rRsopBipSLsb; /* 0x012/0x092 - Section BIP 8 LSB */ 

byte rRsopBipSMsb; /* 0x013/0x093 - Section BIP 8 MSB */ 

byte rTsopCtrl; /* 0x014/0x094 - TSOP Control */ 

byte rTsopDiag; /* 0x01 5/0x095 - TSOP Diagnostic */ 

byte Rsvd2[2]; /* 0x016-0x017/0x096-0x097 - Reserved */ 

byte rRlopCtrlStatus;/* 0x018/0x098 - RLOP Control/Status */ 

byte rRlopIntEnblStatus;/* 0x019/0x099 - RLOP Int enable & status */ 

byte rRlopBipSLsb; /♦ OxOI A/0x09A - RLOP BIP 8/24 LSB */ 

byte rRlopBipg; /* 0x01 B/0x09B - RLOP BIP 8/24 bits 8-15 */ 

byte rRlopBipSMsb; /* 0x01 C/0x09C -RLOP BIP 8/24 MSB */ 

byte rRiopFebcLsb; /* 0x01D/0x09D - RLOP Febe LSB */ 

byte rRlopFebe; /* 0x01 E/0x09E - RLOP Febe bits 8-15 */ 

byte rRiopFebeMsb; /* 0x01 F/0x09F -RLOP Febe MSB */ 

byte rXlopCtrl; /* 0x020/0x0A0 - TLOP Control */ 

byte rTIopDiag; /* 0x021/0x0Al - TLOP Diagnostic */ 

byte rTlopTxKl ; /* 0x022/0x0A2 - TLOP transmit Kl */ 

byte rTIopTxK2; /♦ 0x023/0x0A3 - TLOP transmit K2 */ 

byte Rsvd3 [12]; /* 0x024-0x02F/0x0A2-0x0AF - Reserved */ 

byte rRpopCtrl; /* 0x030/0x0B0 - RPOP Control / Status */ 

byte rRpopIntStatus; /* 0x03 1/OxOB 1 - RPOP Interrupt Status */ 

byte Rsvd4; 

byte rRpopIntEnbl; /* 0xO33/Ox0B3 - RPOP Interrupt Enable */ 

byte Rsvd5[3]; 

byte rRpopPsl; /* 0x037/0x0B7 - Rx Path signal label */ 

byte rRpopBipSLsb; /* 0x038/0x0B8 - RPOP Bip 8 LSB */ 

byte rRpopBipSMsb; /* 0x039/0x089 - RPOP Bip 8 MSB */ 

byte rRpopFebeLsb; /* 0x03 A/OxOBA - RPOP Febe LSB */ 

byte rRpopFebeMsb; /* Ox03B/OxOBB - RPOP Febe MSB */ 

byte Rsvd6; 

byte rRpopBipSConfig;/* 0x03D/0x0BD - RPOP BIP 8 config */ 

byte Rsvd7[2]; 

byte rTpopQrl; /* 0x04O/0xOCO - TPOP Control / Diag */ 

byte rTpopPtrCtrl; /* 0x04 1/OxOCl - TPOP Pointer control */ 

byte Rsvd8[3]; 

byte rTpopArbPtrLsb; /* 0x045/0x0C5 - TPOP Arbitrary pointer LSB */ 
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byte rTpopArbPtrMsb; /* OxO46/0x0C6 - TPOP Arbitrary pointer MSB */ 

byte Rsvd9; 

byte rTpopPsl; /* Ox048/OxOC8 - Tx Path signal label */ 
byte rTpopPathStatus;/* 0x049/0x0C9 - TPOP path status */ 
byte Rsvdl0[6]; 

byte rRacpCtrl; /* OxO50/0x0D0 - RACP Control/Status */ 
byte rRacpIntEnbl; /* 0x051/0x0Dl - Intenable / Status */ 
byte rRacpHdrPattem;/* 0x052/0x0D2 - Match Header Pattern */ 
byte rRacpHdrMask; /* Ox053/OxOD3 - Match Header mask */ 
byte rRacpRcec; /* 0x054/0x0D4 - Rx correctable error count */ 
byte rRacpRuec; /* Ox055/OxOD5 - Rx Uncorrectable error count */ 
byte rRacpRccLsb; /* 0x056/0x0D6 - Rx cell count LSB */ 
byte rRacpRcc; /* 0x057/0x0D7 - Rx cell count bits 8-15 */ 
byte rRacpRccMsb; /* 0x05 8/0x0D8 - Rx cell count MSB */ 
byte rRacpConfig; /* 0x059/0x0D9 - RACP config V 
byte Rsvdll[6]; 

byte rTacpCtrl; /* 0x060/0x0E0 - TACP Control/Status */ 

byte rTacpHdrPattem;/* 0x061/OxOEl - Idle Cell header pattern */ 

byte rTacpPlPattem;/* 0x062/0x0E2 - Idle Cell payload octet pattern */ 

byte rTacpFifoConfig;/* 0x063/0x0E3 - TACP Fife config */ 

byte rTacpTccLsb; /* 0x064/0x0E4 - Tx cell count LSB */ 

byte rTacpTcc; /* Ox065/OxOE5 - Tx cell count bits 8-15 */ 

byte rTacpTccMsb; /* 0x066/0x0E6 - Tx cell count MSB */ 

byte rTacpConfig; /* 0x067/0x0E7 - TACP Config */ 

byte rRaselntEnbl; /* 0x068/0x0E8 - RASE interrupt enable */ 

byte rRaselntStatus; /* 0x069/0x0E9 - RASE interrupt status */ 

byte rRaseConfigCtrl;/* 0x06A/0x0EA - RASE config/control */ 

byte rRaseSfAccPerLsb;/*0x06B/0x0EB - RASE SF accum period LSB */ 

byte rRaseSfAccPer; /*0x06C/0x0EC - RASE SF accum period bits 8-15 */ 

byte rRaseS£\ccPerMsb;/*0x06D/0x0ED - RASE SF accum period MSB */ 

byte rRaseSfSatThrshLsb;/*0x06E/0x0EE-RASE SF saturation thrsh LSB */ 

byte rRaseSfSatThrshMsb;/*0x06F/0x0EF-RASE SF saturation thrsh MSB */ 

byte rRaseSfDecThrshLsb;/*0xO7O/OxOF0-RASE SF Declaring thrsh LSB */ 

byte rRaseS£DecThrshMsb;/*OxO71/0xOFl-RASE SF Declaring thrsh MSB */ 

byte rRaseSfClrThrshLsb;/*0x072/0x0F2-RASE SF Clearing thrsh LSB */ 

byte rRaseSfCIrThrshMsb;/*0x073/0x0F3-RASE SF Clearing thrsh MSB */ 

byte Rsvdl2[9]; 

byte rRaseRxK2; /* Ox07E/OxOFE - RASE Rx K2 */ 
byte rRaseRxKl ; /* OxO7D/0x0FD - RASE Rx Kl */ 
byte rRaseRxSl; /* 0x07F/0x0FF - RASE Rx SI */ 
} tPm5348Regs; 



Listing 1 



The registers used by the PSW application are described in Table 3. These 
registers are used by the PSW for line-level defect detection, and for APS data 
communications. In one embodiment, the PSW communicates using the Kl and K2 
bytes of the SONET overhead. 
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PHY Registers 


Description 


rRsopIntStatus 


Read for Loss of Signal (LOS), and Loss of Frame 
(LOF). 


rRlopCtrlStatus 


Read for Alarm Indication Signal (AIS) and Remote 
Defect Indication (RDI), 


rTlopTxKl 


Written to change the transmit APS Kl byte. 


rTlopTxK2 


Written to change the transmit APS K2 byte. 


rRpopPsl 


Read for single-fiber reflection LOS. 


rTpopPsl 


Transmit a pattern for single-fiber reflection LOS. 


rRaselntStatus 


Read for Protection Switch Byte Failure (PSBF). 


rRaseRxKl 


Read for the receive APS Kl byte. 


rRaseRxK2 


Read for the receive APS K2 byte. 



Table 3 



Page 24 of 57 



PATENT APPLICATION 
DOCKET NO. 1285-0060US 
ALC-135717 



BMU to BMU Communication 

In accordance with one embodiment of the invention, protection switch data is 
communicated between the Protection and the Primary BMU devices. A Quad Serial 
Peripheral Interface (QSPI) ping-pong message is used by the primary BMU to send 
5 line signal condition and active line indications to the protection BMU. The protection 
BMU similarly uses the QSPI ping-pong message to send active line indications to the 
primary BMU. The QSPI ping-pong messages need to be sent often enough for the 
protection switching application to meet timing requirements. The optical interface 
between the BMU and the QOLU can be a single optical fiber. If the fiber is 

10 disconnected or cut, the signal transmitted by the device at each end is reflected back 
to that end s receiver. Since under standard SONET formats, signal reflection may be 
interpreted by each end as a valid signal. The system must discern between APS data 
and regular SONET data. One method of accomplishing this is to alter the SONET 
overhead data, and to add an audit on each end to verify that each end is receiving data 

1 5 from the FE or from itself 

Timing Requirements 

Protection switching performance is characterized by the time to detect certain 
switching thresholds and the tune to physically complete the switch. Figure 7 shows 
the timing requirements in one embodiment of the invention where tO-tl reflects the 
20 time for svdtch initiation, and t2-t4 reflects the time for switch completion. Each time 
event t0-t4 represents a variable point in time during the switching process. The BRX 
protection switching design goals for these times are based on the GR-253 SONET 
Specification Switch Initiation and Completion Criteria section specifications. For 
signal and equipment failures (i.e., LOS, LOF, AIS, and timing block failure), these 
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times are no more than 10ms and 50ms, respectively. For bit error rate (BER)-based 
signal failures and degrades (i.e., BER-SF and BER-SD), switch completion is also no 
more than 50ms, but switch initiation is based on the provisioned BER levels that are 
defined in the SONET specifications. 

5 Failure Strategies 

Together with handling the protecting optics for signal failures (i.e., LOS, LOF, 
AIS, BER-SF, and BER-SD), the PSW application may be also used to protect timing 
block failures. The criteria for timing block failure includes loss of timing 
synchronization with the SONET signal and loss of communications between the 
1 0 timing block for example a Motorola 68HC 1 1 chip or equivalent, and the timing block 
controller in the main processor for example a Motorola 6833 1 chip. 

The SONET overhead includes data that is directly used by the PSW 
application, including the K1/K2 bytes and the C2 byte. The Kl and K2 bytes of the 
first STS- 1 in the 0C-3c signals line overhead are used to provide a 1 28 Kbps datalink 
15 for PSW coordination with the FE. Figure 8 shows the bit-fields of both the Kl and 
K2 bytes. 

The Kl APS Request field 252 (bits 7-4) contains the request types that can be 
used for protection switching control, details of which can be found in GR-SONET 
Specification. Table 4 lists the requests used in the PSW, from highest to lowest 
20 priority. 
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Bit 

Pattern 




1100 


Signal Failure (SF) - Problem detected in the signal received by 
the NE which disrupts service. 


1010 


Signal Degrade (SD) - Same as SF, but less impact on service. 


Olio 


Wait to Restore (WTR) When operation is revertive mode, 
provides hysteresis for return from protection to service. Prevents 
oscillations of the protection selector. 


0010 


Reverse Request (RR) Acknowledgment of an APS request. It 
takes on the priority of the request it is acknowledgmg. 


0001 


Do Not Revert (DNR) - Code sent after a failure has cleared, but 
the protection switch configuration is non-revertive mode. 


0000 


No Request (NR) - Normal operation request value. 



Table 4 



10 The Kl Channel number 254 (bits 3-0) informs the FE receiver of the channel 

for the APS protection switch request The field size is defmed to allow 1 :n (i.e., one 
protection unit for n service units) to use APS switching. In the BRX, there is one 
protection BMU for each primary BMU, thus the chamiel number will only have the 
values 0 for the primary BMU or 1 for the protection BMU. 

15 The K2 Channel number 256 (bits 7-4) reflects the unit that is currently 

switched to protection. To prevent channel mismatch, the K2 channel number should 
always correlate with the channel number in the Kl byte within 50ms of a switch 
request. 

The K2 Architecture and Operation Modes 258 (bits 3-0) define whether the 
20 configuration of the network element is for 1 +1 or 1 : 1 protection switching and whether 
that switching is uni-directional or bi-directional. The default bit pattern for 1+1 , bi- 
du-ectional switching is 01 0 1 . The default bit pattern for 1 : 1 , bi-directional switching 
is 1 101. By default, the PSW application sends the 1+1, bi-directional pattern, even 
though the PSW may be operating in 1:1, bi-dtrectional switchmg. This is done to 
25 sunplify the handshaking with ttie QOLU without needing to modify existing QOLU 
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andTL-1 managementsoftwarewouldhandlethisBRX-imique scenario. An exception 
to these default settings exists when the optics need to declare RDI, where the bit 
pattern would be set to 0110. This field should always correlate with the same field in 
the received K2 byte, within a 100ms time period. Any mismatch in these bytes 
5 between the receiver and the transmitter would represent a mode mismatch (MM) in the 
provisioning of the NE and FE. 

According to the SONET Specification, GR-253, the C2 byte of the first STS-1 
payload envelope in the OC-3 signal is used to provide the payload mapping status. 
For the BRX, the status value is 0x13 for ATM mapping. In accordance with one 

1 0 embodiment of the invention, this byte is altered to indicate whether the BRX is in a 
LOS situation due to single-fiber reflection. The BRX is set to expect to receive a 
prespecified byte value of 0x93 (for single fiber) or 0x13 (for dual fiber) from the FE 
in the C2 byte position. If the BRX receives any other value, a LOS condition will be 
declared. Likewise to assist the FE in the same determination, the BRX transmits a 

1 5 byte value of 0x53 to the FE in the C2 byte. Particularly, if a line failure occurs due to 
a break in the optical fiber the BRX will receive packets having a byte value of 0x53 
in the C2 byte - the same value as the packets it sends, so it will detect the line failure. 
Similarly, the QOLU will receive packets having a C2 byte value of 0x93 or 0x13 - the 
same value it sends, so it too will detect the line failure. 

20 The PSW application can be considered to operate as a state machine, wherein 

transitions between the various states are based on a set of criteria. These criteria 
includes NE protection mode, NE revert state, FE APS data, NE protection BMU 
condition status, and NE primary BMU condition status. The states, stimuli, and 
resulting transitions are shown in Table 6. 

25 The Primary state is that state in which the primary BMU is selected to receive 
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traffic (i.e.. Primary BMU, or BMU-A is set as active). A transition to the Protection 
state includes the process of switching traffic to the protection BMU (i.e., making the 
Protection BMU, or BMU-B active). A Wait To Restore state is included, which 
employs a timer to prevent rapidly repeating (and perhaps erroneous or unnecessary) 
5 traffic switches. 

Condition Priority 

The condition priorities determine the state transitions described above, and are 
defined in Listing 2, where the value is proportional to the priority. The unused 
conditions are checked m the code for signal validation. 

10 





States/ 
Stimuli 


Protection 


Primary 


Wait To 

Restore 




Higher 


no action 


switch to Protection 


switch to 


15 


priority 
condition on 
Primary 
BMU 






Protection 




Condition 


if revertive, 


no action 


n/a 




clears on 


Wait To Restore; 






20 


Primary 
BMU 


else, 

no action 








Wait To 
Restore 
timeout (if 


n/a 


n/a 


switch to 
Primary 


25 


revertive) 










Higher 


switch to Primary 


no action 


switch to 




priority 
condition on 






Primary 


30 


Protection 
BMU 









Table 5 
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#defme _PswDisabled_ (byte)Oxff /* if set PSW is disabled */ 

#define _ApsLockoutOfProtectionToAct_ (byte)Oxfl /* lockout on ACT QOLU */ 

^define _ApsLockoutOfProtectioa_ (byte)OxfO /* Kl protection lockout */ 

#define _ApsSignalFailBCard_ (byte)0xe2 /* B card Signal fail */ 
5 #define _ApsForcedSwitchToAct_ (byte)Oxel /* Forced with no switch */ 

#define _ApsForcedSwitch_ (byte)OxeO /* Kl forced switch rqst */ 

#define _ApsUnused7_ (byte)OxdO /* Kl SF not used */ 

^define _ApsEqptFail_ (byte)Oxc 1 /* A card equipment fail */ 

^define _ApsSignalFailLowPri_ (byte)OxcO /* Kl signal fail */ 
1 0 #defme _ApsUnused6_ (byte)OxbO /* Kl SD not used */ 

#define _ApsSignalDgrLowPriToAct_ (byte)Oxal /* PSW with no switch */ 

#define _ApsSignalDgrLowPri_ (byte)OxaO /* Kl signal degrade */ 

#define _ApsUnused5_ (byte)0x90 /* Kl not used */ 

#define _ApsManualSwitchToAct_ (byte)0x8 1 /* Manual with no switch */ 
1 5 #define _ApsManuaISwitch__ (byte)0x80 /* Kl manual switch rqst */ 

#defme _ApsUnused4_ (byte)0x70 /* Kl not used */ 

#defme _ApsWaitToRestore_ (byte)0x60 /* Kl wait-to-restore rqst*/ 

#defme _ApsUnused3_ (byte)0x50 /* Kl not used */ 

#defme _ApsUnused2_ (byte)0x40 /* Kl not used */ 

20 #defme _ApsUnusedl_ (byte)0x30 /* Kl not used */ 

#defme _ApsReverseRequest_ (byte)0x20 /* Kl reverse rqst */ 

#defme _ApsDoNotRevert_ (byte)OxlO /* Kl do not revert */ 

^define _ApsNoRequest_ (byte)OxOO /* Kl no request */ 

Listing 2 

25 PSW Database 

The PSW uses a locally controlled database or memory to record and track 
protection switching information. One embodiment of a database used as an interface 
between the interrupt routine and the base-level code is the IsrToBase structure, defined 
in Listing 3. 
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typedef struct tIsrToBase 
{ 

/* Signal defect and alann status */ 
word FacStsnDefectStatus; /* line level defects */ 
word FacStsnAlarmStatus; 
word FacPathDefectStatus; 
word FacPathAlannStatus; 
word FacAtmDefectStatus; 
word FacAtmAlarmStatus; 
word FacBipBl 
word FacBipB2 



word FacBipB3; 
word FebeZ2; 
word FebeGl; 
word ProtSwCount; 
byte BerStatus; 
byte Dummy; 
word Read; 
} tIsrToBase; 



/* line level alarms */ 
/* path level defects */ 
/* path level alarms */ 
/* ATM level defects */ 
/* ATM level alarms */ 
/* Consumed by base every 1 sec */ 
/* Consumed by base every 1 sec */ 



/* Consumed by base every 1 sec */ 
/* Count of Line Far-End Errors */ 
/* Count of Path Far-End Errors */ 

/* Count of protection switches */ 
/* To track BER level */ 
/* For byte alignment */ 
/* Kinda semaphore */ 



Listing 3 



An example of the database PSW is defined below, and includes some 
parameters (e.g., manual commands) that the QOLU may use. 
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typedef struct tPsw 

{ 

byte CardType; /* A or B or standalone card */ 

byte Active; /* active indicator */ 

byte Provisioned; /* provisioning status */ 

byte WtrState; /* Wait-To-Restore state */ 

byte CardSd; /* signal degrade on A and/or B card */ 

byte ProtectionState; /* current highest priority condition */ 

byte RdiState; /* state of RDI-L interval condition */ 

byte SourcingReverseRqst; /* APS transmitting reverse request */ 

byte SwitchMsgState; /* state of a manual switch command */ 

byte DisablePswState; /* protection disabled condition indicator */ 

byte RestoredK2Byte; /* K2 restored byte tracker */ 

byte MonitorProtState; /* detected protection condition */ 

byte ApsState; /* APS data conditions */ 

byte ACardState; /* A card conditions */ 

byte UserState; /* manual command conditions */ 

byte RevertState; /* revertive switching mode */ 

byte BCardState; /* B card conditions */ 

byte ARequestPending; /* pending state of B switch to A */ 

byte ARequestPendTimer; /* timeout for switch to A */ 

byte ApsChanMmSetTiraing; /* APS channel mismatch set indicator */ 

byte ApsChanMmTimer; /* APS channel mismatch timer 50ms */ 

byte ApsModeMmSetTiming; /* APS mode mismatch set indicator */ 

byte ApsModeMmTimer; /* APS mode mismatch timer 100ms */ 

byte ApsModeMmClrTiming; /* APS mode mismatch clear indicator */ 

byte ApsModeMmClrTimer; /* APS mode mismatch clear 50ms */ 

byte DeterminedUserState; /* a manual request is determined */ 

byte QspiReceivedByte; /* data received from other card via QSPI */ 

byte QspiSendByte; /* send data to other card via QSPI */ 

word WtrTimer; /* Wait-To-Restore timer */ 

word SwitchMntCond; /* manual command maintenance condition */ 

word RespMntCond; /* maintenance condition for switch message */ 

word SwitchMsgRespTime; /* time to respond to a manual switch message */ 

cRetCode SwitchRetCode; /* return code for the manual switch message */ 

tAdmStsnSwitchReplyMsg StandingSwitch; /* autonomous alarm message */ 

tAdmStsnSwitchMsg CardLineSwDb; /* manual command message */ 

}tPsw; 

Listing 4 
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PSW Redundancy Communications 

The PSW functionality of each BMU (primary or protection) card 
communicates with the same functionaUty in the paired BMU card. The formats used 
for the Psw.QspiReceivedByte and the Psw.QspiSendByte are based on whether the 
5 primary or the protection BMU is sending the data. Figure 9 shows the bit-fields of 
each format. As shown therein, the protection BMU only sends active line indications 
272 (bit 0) to the primary BMU. The primary BMU sends active line indications 282 
(bit 5), signal degrade 280 (bit 4), signal fail 278 (bit 3), and BER level 276 (bits 2-0) 
to the protection BMU. The BER level value is 0 for no BER and ranges in value from 
10 1 for lOE-10 to 7 for lOE-4 (lOE-3 is always a signal fail). Other bits can be used for 
reporting additional information, for example indicating which BMU is active. For 
proper timing, the primary BMU s active indication is designed to match the protection 
BMU s active indication within a 10ms time period. 

Peripheral Equipment Interface 
15 A Peripheral Equipment interface can be used to provision the BRX. The 

provisioning messages and storage structures include those shown in Listing 5. 
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typedef struct tAtmEqptStsnProvMsg 

{ 

eMsgId Msgid; /* _AtmEqptStsnProvMsg_ */ 
uing Time; 

5 word MntCond; /* STSN maintenance condition */ 

tAtmStsnProv StsnProv; /* STSN provisioning */ 
word EqptMntCond; /* eqpt maintenance condition */ 
tAtmEqptProv EqptProv; /* Eqpt provisioning */ 
} tAtmEqptStsnProvMsg; 

10 typedef struct tAtmStsnProv 
{ 

word OcnFacConfig; 

word ProtSwConfig; /* Protection switching configuration */ 
word ApsWtr; 
1 5 tStsn2012ProvThresholds Thresh; 

word AbcuOcnFaimessPct; 
} tAtmStsnProv; 

typedef struct tPmStsnProv 

20 word OcnFacConfig; 

word ProtSwConfig; 

tStsn2012ProvThresholds StsnThresh; /* STSM PM thresholds */ 
} tPmStsnProv; 

typedef struct tStsn2012ProvThreshoIds 
25 { 

tStsnDaily20 1 2Counters Daily; 
tStsnQHourIy2012Counters QHourly; 
word SesCvsS; /* # CvS in a Severely errored sec. */ 
word SesCvsL; /* # CvL in a Severely errored sec. */ 
30 word BerSigFail; /* BER level for signal Mure. */ 

word BerSigDgr; /* BER level for signal degrade. */ 
} tStsn2012ProvThresholds; 

Listing 5 



In one embodiment, upon receiving an_AtmEqptStsnProvMsg_ signal from the 
35 Timeslot/Communications Arbitration Task (TCAT), a Universal Network Interface 
(UNI) user network interface application calls ProcessEqptStsnProvisioningMsg() 
fiinction, whose actions are shown in the pseudo-code Listing 5: 
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ProcessEqptStsnProvisioningMsgO 

{ 

store STSN protection switch configuration provisioning in 
EqptStsnProvMsg.StsnProv. 
5 store BER-SF and BER-SD PM thresholds in PmStsnProv.StsnThresh. 

call ProvisionPswO. 
} 

ProvisionPswO 

1 0 provision Psw.CardType. 

set Psw.Provisioned. 
call InitProtQ. 
Update K2 byte. 

} 

15 InitProtO 

{ 

set Psw-Active. 

reset Psw.StandingSwitch. 

} 

20 Listing 6 



UNI Task 

The user network interface (UNI) is responsible for OC-3 SONET termination 
along with performance monitoring. In one embodiment, the PSW functions are 
incorporated into the UNI application. The UNI includes a one-millisecond interrupt 
25 routine called OneMsIsrQ. This routine handles performance monitoring and alarm 
integration, including checking for the line conditions LOS, LOF, AIS, RDI, and BER 
(with all but BER recorded in IsrToBase.FacStsnDefectStatus). A call to 
PswServiceRoutineQ, detailed in the pseudo-code of Listing 7, may be used to call the 
PSW: 
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PswServiceRoutineO 
{ 

if BER level in IsrToBase.BerStatus is above BER-SF or BER-SD, 

record in IsrToBase.FacStsnDefectStatus. 
if timing block failure exists, 

record signal fail in IsrToBase.FacStsnDefectStatus. 
if primary BMU, 

call ACardCheckDefectsQ. 
if protection BMU, 

call BCardDetermineStateO. 
integrate PSW-related alarm conditions, 
if primary BMU, 

call ACardProcessRequestQ. 
if protection BMU, 

call BCardDetermineStateO- 

} 

Listing 7 



At this point the PswServiceRoutineO returns to the interrupt routine, which in 
turn relinquishes the kernel for other tasks. Most PS W operations involve checking for 
line and equipment conditions or defects, determining the highest priority condition, 
and processing switch requests. Line and equipment conditions are checked on the 
primary BMU by an ACardCheckDefectsQ function, shown in Listing 8: 



ACardCheckDefectsQ 
{ 

if LOS, LOF, AIS, or BER-SF exists in IsrToBase.FacStsnDefectStatus, 

indicate a signal fail to protection BMU. 
else if BER-SD exists in IsrToBase.FacStsnDefectStatus, 

indicate a signal degrade to protection BMU. 
supply BER level from IsrToBase.BerStatus to protection BMU. 
} 

Listing 8 

The BCardDetermineStateO function gets the highest priority condition from 
the protection BMU s perspective, by storing and comparing the results of several 
functions as shown in the pseudocode of Listing 9: 
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BCardDetermineStateO 

{ 

store results from BCardDetenninePswStateO call in Psw.DisablePswState. 
if protection is enabled, 

store results from BCardDetermineSigState() call in Psw.BCardState. 

store results from BCardDetermineApsStateO call in Psw. ApsState. 

store results from BCardDetermineAStateQ call in Psw ACardState. 

store results from BCardDetermineRevertStateO in Psw.RevertState. 
store highest priority condition (via above states) in Psw.MonitorState. 
} 

BCardDetenninePswStateO 

{ 

if Psw.Provisioned is TRUE 

and EqptStsnProvMsg.StsnProv.ProtSwConfig is bi-directional, 
protection is enabled, 
else, 

protection is disabled. 

} 

BCardDetermineSigStateO 

{ 

if LOS, LOF, AIS, or BER-SF exists in IsrToBase.FacStsnDefectStatus, 
signal failure. 

else if BER-SD exists in IsrToBase.FacStsnDefectStatus, 
signal degrade. 

set Psw.CardSd with _BCardSd_. 
else, 
no condition. 

} 

BCardDetermineApsStateO 

{ 

if FE APS request is valid, 

get request, 
else, 

no condition. 

} 

BCardDetermineAStateO 

{ 

if RedundantState.ReceivedRedPingPong is TRUE 
if primary BMU indicates a signal fail, 

signal failure, 
else if primary BMU indicates a signal degrade, 

signal degrade. 

set Psw.CardSd with _ACardSd_. 
else, 
no condition. 

else, 

equipment failure. 

} 

BCardDetermineRevertStateO 

{ 

if Psw.SourcingReverseRqst is TRUE, 
no condition. 
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else if EqptStsnProvMsg.StsnProv.ProtSwConfig includes revertive mode, 
if protection BMU is active from aNE initiated switch, 

in Wait To Restore state, 
else, 
no condition, 
else if protection BMU is active, 

in No Revert state, 
else, 
no condition. 

} 

Listing 9 

Primary BMU protection switching is coordinated by AcardProcessRequestQ and the 
BcardProcessRequest Q as shown in Listing 10. 



ACardProcessRequestO 
{ 

if Psw.Provisioned is FALSE, 

claim primary BMU is active, 
else if RedundantState.ReceivedRedPingPong is TRUE, 
if protection BMU indicates a different active card, 
increment IsrToBase.ProtSwCount. 
update Psw.Active. 
indicate active line to protection BMU. 
else if primary BMU wasn?t previously active, 
send switch message to REDDL. 
increment IsrToBase.ProtSwCount. 
update Psw.Active. 



BCardProcessRequestO 

{ 

if highest priority condition is protection disabled, 

call BCardProcessPswState(). 
else if highest priority condition is to revert a protected line, 

call BCardProcessRevertRqstQ. 
else if highest priority condition is a FE request via APS data, 

call BCardProcessApsRqstQ. 
else if highest priority condition is on protection BMU, 

call BCardProcessSigRqstQ. 
else if highest priority condition is on primary BMU, 

call BCardProcessARqstQ. 

} 

BCardProcessPswStateQ 

{ 

claim protection BMU is active. 

clear K1/K2 transmit to indicate protection is disabled. 

indicate to primary BMU that it should be active. 

} 
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BCardProcessRevertRqstO 

{ 

if in Wait To Restore state, 
if first time, 
set Kl transmit to indicate Wait To Restore, 
set up timing management, 
else if timeout has occurred, 
if results from call to BCardRqstSwitchToAQ indicate success, 

set Kl transmit to indicate revert is complete, 
else, 

indicate primary BMU line failure, 
else if not revertive, 
set Kl transmit to indicate Do Not Revert. 

} 

BCardProcessApsRqstQ 

{ 

if Kl receive indicates protection BMU active, 

call BCardRqstSwitchToBQ. 
else if Kl receive indicates primary BMU active, 

if results from call to BCardRqstSwitchToAQ indicate success, 
indicate switch completed. 

else, 

indicate primary BMU line feilure. 

} 

BCardProcessSigRqstO 
{ 

if Psw.CardSd indicates BER on both BMU lines, 
compare BER levels to determine which BMU s BER is worse. 

if primary BMU s condition (signal fail or degrade) is worse, 
if results from call to BCardRqstSwitchToAQ indicate success, 

indicate switch completed, 
else, 

indicate primary BMU line failure. 

else if protection BMU s condition (signal fail or degrade) is worse, 
call BCardRqstSwitchToBQ. 

} 

BCardProcessARqstQ 
{ 

if Psw.CardSd indicates BER on both BMU lines, 
compare BER levels to determine which BMU s BER is worse. 

if protection BMU s condition (signal fail or degrade) is worse, 
call BCardRqstSwitchToBQ. 

else if primary BMU s condition (signal fail or degrade) is worse, 
if results from call to BCardRqstSwitchToAQ indicate success, 

indicate switch completed, 
else, 

indicate primary BMU line failure. 

} 

BCardRqstSwitchToAQ 
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if protection BMU is active, 
if first time, 

indicate to primary BMU that it should be active. 
5 set up timing management. 

else if primary BMU indicates being active, 
send switch message to REDDL. 
set Ki transmit to indicate current request & channel 
increment IsrToBase.ProtSwCount. 
1 0 update Psw. Active. 

else if timeout has occurred, 
switch has failed. 

else, 

set Kl transmit to indicate current request & channel. 

15 ) 

BCardRqstSwitchToBO 

{ 

indicate to primary BMU that protection BMU should be active, 
if primary BMU is active, 
20 send switch message to REDDL. 

set KI transmit to indicate current request & channel. 

increment IsrToBase.ProtSwCount 

update Psw.Active. 
else, 

25 set Kl transmit to indicate current request & channel. 

} 

Listing 10 



Figure 10 illustrates the process described in Listing 10. As shown in Figure 
10, following an initialization step, the primary BMU is set to BMU-A, with the 

30 protection BMU set to BMU-B. The PSW application is started. While it functions as 
a state machine the PSW continousouly checks the signal status of the primary line. 
When a line failure is detected two alternatives exist, the process will either wait to see 
if the signal is restored, or the process will initiate a switchover, setting the primary 
BMU to BMU-B, and the protection BMU to BMU-A. This switchover is effected by 

35 the PSW application using the overhead bytes, specifically the Kl byte, of the SONET 
packet. This PSW database is then updated to reflect the switchover. Depending on 
whether a revert/no-revert flag is set, the PSW may at a later stage revert to the original 
Primary = BMU-A, Protection = BMU-B configuration if it detects the hue connected 
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to BMU-A has been fixed, or is no longer in a fail mode. 

Redundant Datalink Interface 

As described above, a QSPI ping-pong message is used to communicate 
between the BMU s. The QSPI ping-pong message tBptPingPongMsg function uses a 
5 PswByte for PSW coordination between the primary BMU and protection BMU. The 
REDDL gets the transmit information from Psw.QspiSendByte, and stores the receive 
information it gets in Psw.QspiReceivedByte. The PSW ascertains whether the other 
BMU is alive by reading the ping-pong validity indication in REDDL s 
RedundantState.ReceivedRedPingPong structure, which in one embodiment is based 
1 0 on whether or not a specified time period, for example 1 0ms, has elapsed since the last 
indication change. 

Because of PS W dependency with REDDL, the optical and processor switching 
needs to occur closely together. If the messaging is quick enough ie., calls and data 
are not lost, the protection BMU s PSW may send a _BmuStateTransitionMsg_ to both 

1 5 the active and standby REDDL whenever there is a need to switch the active BMU, i.e. 
that BMU which is currently receiving voice, data, and signaling traffic. Other forms 
of commxmication between the BMU PSW s and between the PSW s and the REDDL 
can be used while remaining within the spnit and scope of the invention. 

The PSW may determine whether there is a timing block failure by reading the 

20 indications from the timing block controller s TBOutOfSync and 
TBCommunicationFailure. PSW declares the BMU to have a signal fail condition 
whenever either of these indications exist, and uses the condition as it normally would 
in protection switching decisions. 
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Alarm Handling 

The PSW-related alarm conditions are checked in a PswServiceRoutineO 
function. These include PSBF, APS Channel Mismatch (CM), APS Mode Mismatch 
(MM), and Protection Line Signal Failure Defect (PLD). These alarms are then 
mtegrated by a call to an ApsAlarmlntegrationO routine. 

Litespan Implementation 

The following sections detail how one embodiment of the invention may be 
installed in the field using a Litespan system. Figure 11 shows a typical Litespan / 
BRX system 320 for use with the invention. The BRX shown is a remote access 
extension of the Litespan system operating over an optical or electrical interface. 

The BRX 322 is subtended to a Litespan terminal 326 that provides 
management, control, and switching functions. In this respect the BRX can be viewed 
as a remote channel bank with narrowband, wideband, and broadband capabilities. 
From a technology point of view, the BRX is a broadband unit that supports 
narrowband services. The BRX connects to a Litespan Terminal in the Central Office 
(COT) 330 or to a remote Litespan terminal over optical or electrical interfaces 332. 
Voice, video and data traffic is transported between the BRX and the Litespan terminal. 
Standard ATM cell payload is used, at the datalink layer, between the BRX and the 
subtending bank for TDM 334 as well as ATM 336 traffic. A non-standard ATM 
Adaptation Layer (AAL) scheme is used to carry TDM traffic within the ATM payload. 
In this configuration, the BRX is subtended by a BFB over an 0C3 optical interface. 

In the upstream direction, the following takes place, as illustrated further in 
Figure 12. The BRX sends ATM cells containing the Broadband ATM traffic and the 
TDM traffic packaged in special ATM cells that are called TDM cells. This function 
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is handled by the abstraction layer. When the BFB receives upstream data the following 
takes place:. 

For voice processing, the BFB recognizes the TDM cells by a special pattern 
in the ATM cell header, termmates the AAL-D sub-layer extracting the TDM 
5 data, and maps the TDM data over the octalbus as TDM slots. The ATM Fiber 

Bank Interface combines the Octalbuses in addition to information received via 
a serial bus interface of the optical line units, i.e. TDM and control traffic, from 
all cards, and sends them over the time slot interchange cables to the CC for 
processing. 

1 0 For data/video processing, the BFB terminates the 0C3 physical layer 

and passes llie ATM cells to a different physical layer, which is the cellbus. The 
cell relay unit terminates the ATM layer, which includes cell buffering, cell 
header translation, and cell switching functions. The cell relay imit sends the 
ATM cells to the transport cards, which send the data to the ATM network over 

15 0C3 optical interfaces. 

In the downstream direction the reverse operation takes place. 
BRX Unit Hardware Architecture 

Figure 13 show the architecture of a typical BRX unit. In addition to the power 
supply, backplane, and fan, the BRX unit provides eleven slots tiiat can house many 

20 board types, including the following: 

3 . BMU 372, 374: tiie BRX Controller (two BMU per BRX for facility protection) 

4. LU 376, 378: Service Line Unit 

5. MTRG 390: Maintenance and Ring Generation line unit 

6. The interconnection between these board and the BMU is carried out mainly 
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over two types of buses: 
7. SBI 392, 394: a point-to-point 1 -bit bus between a line unit and each BMU for 
carrying the TDM traffic and the data-link messages from the Litespan common 
control. 

5 8. Cellbus 398: an 8-bit bus shared by the two BMU's; only the active BMU uses, 
to carry the ATM traffic to the line units. Each BRX has four buses, and every 
two line units shares one bus. 



Broadband Multiplex Unit (BMU) 

The BMU is responsible for commianicating with the Litespan terminal over an 
1 0 0C3 interface (for optical feed, or similarly over HDSL line unit interface for electrical 

feed) to acquire provisioning and operational information. The BMU can be configured 

to use either of these two network feed media. 

The BMU supports point-to-point serial links over the serial bus interface bus 

with every line unit. Narrowband line units such as those that provide POTS, ISDN , 
15 and Tl service use the SBI. The BMU multiplexes traffic received from subscribers via 

the SBI and forwards it to the Litespan. The BMU also supports the cellbus for 

ATM-based data traffic. 

The BRX supports facility protection, which can be of various means including 

optical and electrical. In accordance with one embodiment of the invention this 
20 protection is achieved by redundant BMU's, i.e. two BMU's (BMU-A, the primary and 

initially active unit, and BMU-B, the protection or standby unit). This configuration 

provides redundant control and optical interface with a Litespan terminal having the 

following configuration: 
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Every LU has two serial point-to-point SB! buses with BMU-A and BMU-B. 

Two BMUs may share one cellbus, which is shared by all the LUs. The standby 
BMU tri-states its cellbus drivers. 

One BMU v^U be in active state while the other is in a standby state. 

A redundancy control interface allows the two BMUs to communicate. 

On the downstream direction, the two BMU's receive the same SONET signal 
from the two OLU's (HDLU's) that they are connected to. 

Failover Operation 

As described above, the BRX requires a Litespan to connect to the ATM/TDM 
network, and this connection is of the point to point variety via an OC-3 link. The 
facility protection is thus linear. In this case, there two possible ways to realize the 
protection, 1+1 and 1:1. 

The invention utilizes an embodiment of a failover system 400 as shown in 
Figure 14. 1:1 facility protection is a special case of l:n protection, which is 
defined that there is only one standby facility/system to protect one out of n 
facilities/systems upon failure. Therefore, the standby does not have to carry identical 
SONET payload during normal operation. In the BFB 410, the xOLU's (Optical Line 
Unit) 412, 414 support the 1+1 protection scheme, which insures that both BMU's are 
receiving similar SONET signals. On the other hand, the two BMU's, A 422 and B 424, 
must receive exactly the same traffic from all line units 430 on the SBI and cellbus to 
implement the 1+1 protection scheme. The configuration of these buses in the BRX 
does not preclude this requirement. In some cases, narrowband LU's do not drive SBI-A 
and SBI-B simultaneously, which precludes 1+1 protection. In these cases 1:1 
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protection caa be used. 

Protection Switching 

Upon a failure detection (at the board/equipment level or at the SONET/facility 
level), a sv^tchover operation will take place in cooperation with the Litespan CC. The 
5 failure is declared by BMU-B, which is the master, upon determining: 

Loss of signal (LOS) on the Receive side of BMU-A 

Loss of frame (LOF) on the Receive side of BMU-A 

The quality of the SONET signal in terms of Bit Error Rate (BER) is better in 

BMU-B compared to in BMU-A. 
10 A protection switching indication is sent in the SONET overhead from the 

network side, i.e. BFB. 

Non-SONET-related defects in the active BMU, such as timing failure, or 
persistence of processor reset 

For a single fiber BMU, the optical signal reflected from the cut end may give 
1 5 a false indication to both the active BMU and quad optical line unit (QOLU) that it is 
a valid SONET signal. To counter this, a non-standard scheme may be adopted by 
altering a field in the SONET overhead, specifically the byte C2. Predefined patterns 
are sent in such a field to differentiate the type of fiber; i.e. single vs. dual, on the 
far-end side. The QOLU and BMU swap different patterns, so any reflected signal will 
20 not match what is supposed to be (/. e, , expected to be ) received from the other end. 
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Failover Methods 

An embodiment of the method utiHzed by the invention to recognize a failover 
situation and initiate failover protection is shown in the flow chart of Figure 15. As 
illustrated, the system is initialized with a first active optical interface. A second optical 
5 mterface is initially inactive. The BRX sends data upstream via one of a pair of BMU 
s, each of which is operably connected to one of the optical interfaces. Data is received 
downstream from the Central Office Terminal / BFB. Upstream data is coded, or given 
a first source identifier, by coding the data header with a predetermined byte pattern. 
Downstream data is similarly coded with a second source identifier hi the data header 

10 representing the different source of the data. The system continuously checks the 
header bytes. In normal use a first device sending data with a first source identifier will 
receive data having a second source identifier, and vice versa. When a failure occurs, 
perhaps due to a line break, the optical fiber acts as a reflector, and the first device 
sending data will either receive data having a first source identifier, or will receive 

15 corrupted data having a totally different source identifier. In either case, it will not 
receive the data together with the second source identifier which it expects to receive. 
This is detected by the system, which detects the failover condition. In response to 
detecting the failover condition, the first optical interface is made inactive, while the 
second optical interface is made active. Communication then continues as normal over 

20 the second optical interface. 
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As used herein, a given signal, event or value is "responsive" or in response to 
a predecessor signal, event or value if the predecessor signal, event or value influenced 
the given signal, event or value. If there is an intervening processing element, step or 
time period, the given signal, event or value can still be "responsive" to the predecessor 
5 signal, event or value. If the intervening processing element or step combines more than 
one signal, event or value, the signal output of the processing element or step is 
considered "responsive" to each of the signal, event or value inputs. If the given signal, 
event or value is the same as the predecessor signal, event or value, this is merely a 
degenerate case in which the given signal, event or value is still considered to be 

1 0 "responsive" to the predecessor signal, event or value. "Dependency" of a given signal, 
event or value upon another signal, event or value is defined similarly. 

Figure 16 shows a flowchart of another embodiment of the method used by the 
invention in initiating a failover protection. In this embodiment of the method, either 
device may recognize the failover condition and initiaUze a failover to the second 

1 5 optical interface. 

As described earlier with respect to Figure 5, an embodiment of the method 
utilized by the invention to recognize a failover situation and initiate failover protection 
is shown in the flow chart of Figure 15. As illustrated, the system is initialized with a 
first active optical interface. A second optical interface is initially inactive. The BRX 

20 sends data upstream via one of a pair of BMU s, each of which is operably connected 
to one of the optical interfaces. Data is received downstream firom the Central Office 
Terminal / BFB. Upstream data is coded, or given a first source identifier, by coding 
the data header with a predetermined byte pattem. Downstream data is similarly coded 
with a second source identifier in the data header representing the different soxirce of 

25 the data. The system continuously checks the header bytes. In normal use a first device 
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sending data with a first source identifier will receive data having a second source 
identifier, and vice versa. When a failure occurs, perhaps due to a line break, the optical 
fiber acts as a reflector, and the first device sending data will either receive data having 
a first source identifier, or will receive corrupted data having a totally different source 
5 identifier. In either case, it will not receive the data together with the second source 
identifier which it expects to receive. This is detected by the system, which detects the 
failover condition. In response to detecting the failover condition, the first optical 
interface is made inactive, while the second optical interface is made active^ 
Communication then continues as normal over the second optical interface. The 

1 0 different with this embodiment of the invention is that either the first or second device 
will detect the line failure. 

The foregoing description of preferred embodiments of the present invention 
has been provided for the purposes of illustration and description. It is not intended to 
be exhaustive or to limit the invention to the precise forms disclosed. Obviously, many 

15 modifications and variations will be apparent to practitioners skilled in this art. In 
particular, it will be obvious that the present invention may be employed in areas other 
than those related to SONET communications, i.e. to other forms of data 
communication that utilize bidirectional connections. The embodiments were chosen 
and described in order to best explain the principles of the invention and its practical 

20 application, thereby enabling others skilled in the art to understand the invention for 
various embodiments and with various modifications as are suited to the particular use 
contemplated. It is intended that the scope of the invention be defined by the following 
claims and their equivalents. 
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